more catalog secret fixes
bump to 1.1.18